# STEP_034D XS Map / endpoint plan

Permanent MGTS endpoint:

- public IP: `95.165.105.4`
- DNS: `wg-studio.secret-studio.ru`
- admin WG endpoint for VM121/VM130: `wg-studio.secret-studio.ru:51820`
- WG Paid client endpoint: `wg-studio.secret-studio.ru:51830`

Required apply targets after review:

1. router-ops / VM130:
   - `/opt/router-ops/inventory/access-map.yml`
   - `/opt/router-ops/inventory/access-map.md`
   - possibly local WireGuard admin client config for MGTS
   - replace temporary/old endpoint:
     - old local MGTS endpoint: `192.168.30.218:51820`
     - temporary public IP endpoint: `95.165.105.4:51820`
     - final: `wg-studio.secret-studio.ru:51820`

2. VM121:
   - admin WG config/interface, likely `wg-mgts`
   - final peer endpoint: `wg-studio.secret-studio.ru:51820`

3. WG Access / WG Paid:
   - generated paid client configs must use:
     - `Endpoint = wg-studio.secret-studio.ru:51830`
   - find exact source in VM121 WG Access node/env/backend config before apply.

No changes were applied in STEP_034D.